$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft File: gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft (raw, json) Hash identifier: afWIB099Tsgc32ojqj8B6Z304tmRFTfY2TOC1EJKtRk= Subject key identifier: FA:02:58:BC:FF:D8:5B:BE:BA:7E:75:DE:0D:FB:6F:1F:83:05:41:5F Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 Certificate issuer: /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Certificate serial: 365A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft Manifest number: 35A7 Signing time: Tue 12 May 2026 14:44:22 +0000 Manifest this update: Tue 12 May 2026 14:44:21 +0000 Manifest next update: Tue 19 May 2026 14:44:21 +0000 Files and hashes: 1: gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl (hash: /djUABpX1gsBZVeyHCFUnWuhSz41HDxmbIGNAA4gPGY=) 2: 7D883CF033F911E98674843BC4F9AE02.roa (hash: CoasRg2DGu9JMRzgRqeM5/d+mbsPFZm9qeb8r6Sr3XE=) 3: 7E04A27C33F911E98674843BC4F9AE02.roa (hash: 3i0z2osisz1IhAHAtFccv5uOaN5Ra1G9W/L98klGlE8=) 4: 26CCB614E0D011E9B0E8C36FC4F9AE02.roa (hash: Hj19lbwQkmgXh2lmPzGWYqIUEUY+YjAHDJo8DvWnQhg=) 5: A8689054340411E9A22CD05CC4F9AE02.roa (hash: AZihbaN8E44U2FxVABNpgB/Zu9iqvuTBqyKY3ZPJiVw=) 6: AACC7DA6340411E9A22CD05CC4F9AE02.roa (hash: k0uZVX0nsDGgLqmDvVfTLTs9cFGF738mh3IkZuFo3ak=) 7: A8ED77E2340411E9A22CD05CC4F9AE02.roa (hash: QUkQde57UWEId07KtM6ohSI0mt86ITfJmEc6feUVNtI=) 8: AA2A006C340411E9A22CD05CC4F9AE02.roa (hash: d2KcEJoKGoHbLyeqM22p8xGAN7ehyctRiL8Waj0Hz9E=) 9: 24108E38125C11EFA53AA21EC4F9AE02.roa (hash: 2+BgLsoGqPCQJSAxNsoYe7RC8cai5q0+HBftKrsi8vg=) 10: 8C7BC30E5B7E11F0AA42172EC4F9AE02.roa (hash: tQ6h5U80hViApEcolMy8eZlxAFiz9SJZ7qPINPyuZ+w=) 11: A98C92A0340411E9A22CD05CC4F9AE02.roa (hash: NpdXvUi0bOLwAI99mVEhTKoihk55uTCpoGGEQSEc3Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13914 (0x365a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64 Validity Not Before: May 12 14:44:21 2026 GMT Not After : May 19 14:44:21 2026 GMT Subject: CN=6a033cc6-c472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bb:eb:15:b4:48:94:1c:2b:76:b4:51:62:66: e7:18:8e:7b:d2:f0:2f:3e:d1:02:fa:39:60:b4:48: fa:0a:8a:56:75:27:15:4e:d5:75:c9:f2:1a:26:ff: 9f:fb:9b:d0:3a:94:1c:1e:8d:a5:fd:ef:9b:53:11: 1b:bc:9b:7d:0a:25:f9:c1:5e:b6:3e:ae:1d:81:66: 94:a5:97:68:a3:2b:11:71:51:ff:55:7f:b5:83:96: 4e:9d:24:22:98:71:20:c8:04:0f:96:cb:c5:88:d9: 7f:31:f6:99:11:5e:61:45:5d:30:c5:32:3e:5d:26: d1:4c:44:f6:8d:58:0b:f8:c2:55:df:b7:2a:c5:51: 34:7e:f4:47:b9:39:88:a8:37:b0:8a:ed:d5:be:c5: 4e:ec:bc:73:9f:ac:ea:5e:1c:8e:60:64:f7:d3:22: cc:bd:39:31:b5:86:2d:7c:fe:bc:19:3c:62:99:f6: 10:a3:13:68:72:37:13:08:8b:89:2f:2c:8b:d6:07: fe:b3:c2:74:8b:e5:31:68:22:bf:e8:9d:a8:30:ef: db:73:63:9b:07:4c:35:f1:ce:56:27:c5:eb:c9:8c: ad:d1:18:c3:2d:db:43:8b:a4:3a:01:08:77:d8:09: bc:b1:32:3c:78:db:84:3c:5e:6a:d7:3d:bb:88:cb: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:02:58:BC:FF:D8:5B:BE:BA:7E:75:DE:0D:FB:6F:1F:83:05:41:5F X509v3 Authority Key Identifier: keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:02:4b:66:94:98:d8:be:9f:c7:90:04:30:d3:7d:87:b5:58: dd:7e:f4:c3:b2:fa:38:4d:47:8f:69:40:93:59:95:97:5d:58: 03:ae:df:a4:52:8e:55:de:6d:c4:84:c5:41:25:e7:f9:3f:b3: 89:0c:d2:f3:69:bb:04:50:16:c3:76:93:af:8f:6c:fa:7b:bf: 2d:4a:d3:5a:22:41:78:01:37:3d:b4:a2:03:2d:f4:4a:e8:b7: 3a:b6:c3:d6:35:78:78:12:4f:1c:37:b1:c8:42:f5:90:5f:7c: 4e:c6:7a:3f:45:7e:35:e3:4d:96:70:c6:03:84:e2:14:12:e4: a5:64:99:c2:05:30:68:4c:e2:c1:83:29:a9:82:4f:cc:88:03: dd:a7:48:0c:69:7d:ed:b2:8e:e7:dd:0d:9c:2b:bd:42:20:4d: 17:a3:59:a0:d8:f0:a4:fa:b3:22:28:a5:60:27:73:37:d3:40: 8c:46:37:6b:80:98:f6:7c:9c:e5:5c:58:dd:bb:b0:9c:eb:4a: 26:72:f8:1c:5c:96:6d:9f:8a:97:ce:7c:52:0e:db:84:ec:da: 0a:5d:4c:e8:df:33:6b:40:31:fe:cf:bf:e7:15:ac:f2:3c:bf: 02:51:25:ae:4b:09:b3:0c:03:09:86:5e:90:c2:bc:e3:c8:34: cf:bc:d9:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEzMTgxMTAvBgNVBAUTKDgwNkFCRkY0NjM1OTRDQUEzMERFNzBBMzExQUUyRjg0 OTE4OUJDNjQwHhcNMjYwNTEyMTQ0NDIxWhcNMjYwNTE5MTQ0NDIxWjAYMRYwFAYD VQQDEw02YTAzM2NjNi1jNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrvrFbRIlBwrdrRRYmbnGI570vAvPtEC+jlgtEj6CopWdScVTtV1yfIaJv+f +5vQOpQcHo2l/e+bUxEbvJt9CiX5wV62Pq4dgWaUpZdooysRcVH/VX+1g5ZOnSQi mHEgyAQPlsvFiNl/MfaZEV5hRV0wxTI+XSbRTET2jVgL+MJV37cqxVE0fvRHuTmI qDewiu3VvsVO7Lxzn6zqXhyOYGT30yLMvTkxtYYtfP68GTximfYQoxNocjcTCIuJ LyyL1gf+s8J0i+UxaCK/6J2oMO/bc2ObB0w18c5WJ8XryYyt0RjDLdtDi6Q6AQh3 2Am8sTI8eNuEPF5q1z27iMuVXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoCWLz/ 2Fu+un513g37bx+DBUFfMB8GA1UdIwQYMBaAFIBqv/RjWUyqMN5woxGuL4SRibxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTMxOC9EQzc0NTFGMjFE OTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRLb3czbkNqRWE0dmhKR0p2 R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dHcV85R05aVEtvdzNuQ2pFYTR2aEpHSnZHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTMxOC9EQzc0NTFGMjFEOTExMUUyOThFNzQ2RjQwOEIwMkNEMi9nR3FfOUdOWlRL b3czbkNqRWE0dmhKR0p2R1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAQJLZpSY2L6fx5AEMNN9h7VY3X70w7L6OE1Hj2lAk1mVl11YA67fpFKOVd5t xITFQSXn+T+ziQzS82m7BFAWw3aTr49s+nu/LUrTWiJBeAE3PbSiAy30Sui3OrbD 1jV4eBJPHDexyEL1kF98TsZ6P0V+NeNNlnDGA4TiFBLkpWSZwgUwaEziwYMpqYJP zIgD3adIDGl97bKO590NnCu9QiBNF6NZoNjwpPqzIiilYCdzN9NAjEY3a4CY9nyc 5VxY3buwnOtKJnL4HFyWbZ+Kl858Ug7bhOzaCl1M6N8za0Ax/s+/5xWs8jy/AlEl rksJswwDCYZekMK848g0z7zZPw== -----END CERTIFICATE-----Generated at Wed May 13 09:13:52 2026 by rpki-client